Privacy Policy

I. Data Protection Policy
This data protection policy applies to all personal data processing carried out by the controller, both through the website www.groupsalto.com and for all other processing activities.
Therefore, before providing us with personal data, it is essential that you are familiar with our data protection policy.
For any questions regarding the data protection policy, you may contact the following email address: lopd@esalto.es
The user declares that they have been informed of this personal data protection policy, accepting the processing of personal data by the controller for the purposes described.
The applicable regulations are as follows:
a.- GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons.
b.- LOPDGDD: Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
c.- LSSI: Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.

II. Identity of the Controller
The joint controllers of the processing are Electronica Salto, SLU, with Tax ID B25317827, registered office in Torregrossa, Calle Lleida, number 60, postal code 25141, telephone 973205854, email lopd@esalto.es, registered in the Lleida Commercial Registry, volume 280, page 152.
IT Saltó, SLU, with Tax ID B25766304, registered office in Torregrossa, Calle Lleida, number 60, postal code 25141, telephone 973205854, email lopd@esalto.es, registered in the Lleida Commercial Registry, volume 1356, page 44.
SM Technology and Services 2050, SLU, with Tax ID B25841362, registered office in Torregrossa, Calle Lleida, number 60, postal code 25141, telephone 973205854, email lopd@esalto.es, registered in the Lleida Commercial Registry, volume 1543, page 30.

III. Contact Details of the Data Protection Officer
The User may contact the Data Protection Officer via the following address: lopd@esalto.es or by sending a written communication to the controller’s address, addressed to the “Data Protection Officer”.

IV. Personal Data Processing
Below are the personal data processing activities we carry out as controllers.

a.- Clients
Identity of the joint controllers: Electronica Saltó, SLU with Tax ID B25317827, IT Saltó, SLU with Tax ID B25766304 and SM Technology and Services 2050, SLU with Tax ID B25841362, all with registered office in Torregrossa, Calle Lleida, number 60, postal code 25141, telephone 973205854 and email lopd@esalto.es.
Data Protection Officer: The User may contact the Data Protection Officer via lopd@esalto.es or by written communication addressed to the controller’s address, to the attention of the “Data Protection Officer”.
Purpose of processing: To establish and execute the legal relationship with the client related to the contracted services or products, compliance with legal, accounting and tax obligations and all those related to the established legal relationship, to respond to queries and manage, control, administer, expand, execute and improve the relationship.
Legal basis: Performance of a contract and consent or legitimate interest of the controller in the case of processing for advertising purposes or automated decisions.
Data collected: First name, surname, ID number, professional contact address, email, tax ID.
Recipients: In general, the controller will not transfer personal data to third parties unless there is a legal obligation or the express consent of the data subject.
Specifically, personal data may be transferred to:
a.- Public Administrations, Judges and Courts for compliance with legal obligations.
b.- Financial institutions for compliance with contractual obligations.
c.- Third parties where necessary for the development, execution and control of the contract.
d.- Data processors, where access does not constitute data transfer, when necessary for the provision of services contracted by the controller.
Retention periods: Data will be processed only for the time necessary for the purposes for which they were collected and while consent is not withdrawn. After termination, data will be blocked for legally required periods and then deleted unless retention is required.
Rights: The data subject may exercise rights of access, rectification, erasure, restriction, objection, portability, not to be subject to profiling or automated decisions, and withdraw consent without retroactive effect by written request to the controller, providing ID.
Complaints may be submitted to the Spanish Data Protection Agency at www.aepd.es

b.- Prospective clients
Identity, DPO, purposes, legal basis, data, recipients, retention periods and rights: same structure as above, with the purpose of responding to queries arising from contact with the controller.

c.- Website contact form
Identity of the joint controllers: same as above.
Purpose: To handle user inquiries and contact requests received through the website and manage the requested service.
Legal basis: User consent.
Data collected: Name, phone, email, inquiry, IP address, operating system and duration of visit.
Recipients, retention periods and rights: same as above.

d.- Suppliers
Identity, DPO, purpose (management of contractual relationship), legal basis (contract and consent), data, recipients, retention periods and rights: same structure as in section a.

e.- Social media
Identity of the joint controllers: same as above.
Purpose: Registration and monitoring of corporate social media accounts.
Legal basis: User consent when registering on the platform.
Data collected: Personal data provided by the user or social network (name, surname, tax ID, address, email, phone).
Recipients, retention periods and rights: same as above.

f.- Human resources
Identity of the joint controllers: same as above.
Purpose: Management of the employment relationship.
Legal basis: Performance of a contract.
Data collected: Name, ID, social security number, address, email, phone, marital status, date and place of birth, age, gender, nationality, bank account, profession, experience, education and skills.
Recipients, retention periods and rights: same as above.

g.- Recruitment
Identity of the joint controllers: same as above.
Purpose: Management of applications for recruitment processes or future vacancies.
Legal basis: Consent of the data subject.
Data collected: Name, surname, phone, email, CV, cover letter and any related personal data.
Recipients, retention periods and rights: same as above.

h.- Video surveillance
Identity of the joint controllers: same as above.
Purpose:
Ensure the security of people, property and facilities.
Compliance with emergency plans.
Use of video surveillance as a means of business control regarding access, presence and compliance with employment obligations.
Legal basis: Legitimate interest.
Data collected: Images.
Recipients, retention periods and rights: same as above.

i.- Email legal notice
This message and its attachments are intended exclusively for the recipient and contain confidential information. If you are not the intended recipient, have received it in error or are not authorized, you may not read, copy, store, disclose or use it. Please notify lopd@esalto.es or return it to the sender and delete it immediately without reading.
In accordance with data protection regulations, personal data collected or generated when contacting the controller (such as email address and content) will be processed to manage your request, within a commercial or potential relationship, or in the case of unsolicited communication (legitimate interest). Data will be retained while the relationship is active and thereafter as required by law. Rights may be exercised at lopd@esalto.es. For more information see https://groupsalto.com/política-de-privacidad

V. Security Measures
The controller has implemented appropriate technical and organizational measures to ensure an adequate level of security and prevent loss, misuse, alteration and unauthorized access to data.

VI. Data Quality and Updating
Providing requested personal data is mandatory; failure to do so prevents processing.
The user undertakes to provide accurate, current and truthful data and to notify any changes.
If providing third-party data, the user must inform them under GDPR articles 13 and 14, obtain prior consent and process data only for authorized purposes.
The user is responsible for any damage caused by inaccurate or inappropriate data.

VII. Minors
This website is intended for adults; persons under 18 are not allowed to provide personal data.

VIII. Modification of the Data Protection Policy
The controller may update or modify this policy at any time in accordance with applicable law, case law developments or business practices, publishing changes on this website.

HEADQUARTERS OF OPERATIONS